Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File:                     X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier:          IxPS4AGeJgmBwDsQewYoptGUSbjNGQwxQpw5+amnqX8=
Subject key identifier:   BD:28:3D:D8:DD:4A:FB:D1:CD:56:78:56:D0:EB:D2:B0:4B:3D:7F:CE
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer:       /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial:       0192395D248D51C30BEA5190060173EC817F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number:          12E0
Signing time:             Sat 28 Sep 2024 16:00:58 +0000
Manifest this update:     Sat 28 Sep 2024 16:00:58 +0000
Manifest next update:     Sun 29 Sep 2024 16:00:58 +0000
Files and hashes:         1: C-07o9zYj3864GUGzezFOaqaNPU.roa (hash: W7Ah1n8RLvSuGN6rGn9l+B0Oi0aU42ed1baMU9y2l0w=)
                          2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: bdHmaBA0l0HmW9mXsvDNw6vOhHghv0lQXxkPB2W3Tww=)
                          3: fgx0zPKdnSYj78EKEsgE_owShCE.roa (hash: A+WHZ/ZJwaBQO6Uq5KzD2xxjqD/bX/xxdp2sx2xACkE=)
                          4: lqhk6biJphpkGni3g1hKEC0QD-U.roa (hash: pdIj1ppEFRKV7mT0SvQQiypO7wLFPnX+6vRqTUfmDlo=)
                          5: tUckTWwCii0oe4MX4orJfzAOb6Q.roa (hash: //WcP1h0WQaQ8alXRU6jbqZcTGYLgBumm4TKW1pErTM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:5d:24:8d:51:c3:0b:ea:51:90:06:01:73:ec:81:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
        Validity
            Not Before: Sep 28 16:00:58 2024 GMT
            Not After : Sep 29 16:00:58 2024 GMT
        Subject: CN=bd283dd8dd4afbd1cd567856d0ebd2b04b3d7fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:78:b8:89:58:7c:a0:44:a5:fb:a8:e9:1f:
                    83:6d:23:28:9c:99:41:cd:43:0d:85:4c:c8:b2:9a:
                    02:18:cb:1a:a8:f9:31:eb:ff:da:05:5b:25:c3:df:
                    ac:22:8e:5f:70:42:58:c5:01:33:d4:04:d5:3d:54:
                    e0:97:4e:56:cc:a9:7f:07:01:9b:c2:a6:da:f9:3d:
                    ae:7b:72:c0:36:9e:a7:db:cc:2a:34:eb:e5:58:d5:
                    4e:43:17:30:2a:84:b7:1b:b2:8c:62:29:12:73:4b:
                    53:29:f5:cb:c1:b7:32:9e:d5:49:d2:64:22:a6:92:
                    f4:35:e4:88:59:5e:e6:fb:5c:5b:84:a9:2e:b0:74:
                    69:01:72:dd:ca:07:af:97:a8:03:6d:39:e2:0c:01:
                    ce:b9:4d:7e:c7:71:9f:d9:c3:6e:40:d9:f9:5d:21:
                    4c:c7:d9:a3:31:0f:b6:49:a7:53:75:2c:e5:bf:0f:
                    46:cf:08:5b:84:31:a7:c4:c8:c0:0c:24:4c:a8:97:
                    67:f0:7c:8e:66:8d:3e:32:ec:18:4c:3e:ef:93:00:
                    66:b7:c3:c4:95:e4:c7:76:a3:6e:eb:84:86:31:02:
                    73:82:f5:82:ad:a2:69:f7:a7:0a:05:25:62:4a:85:
                    8b:b8:38:b5:6d:8d:3a:8b:4b:82:73:a4:42:39:84:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:28:3D:D8:DD:4A:FB:D1:CD:56:78:56:D0:EB:D2:B0:4B:3D:7F:CE
            X509v3 Authority Key Identifier:
                keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a2:bc:74:77:14:ff:29:2e:55:c4:08:1a:97:c9:57:72:d8:
         d3:58:d1:de:a6:88:63:ab:a4:60:ca:1d:0b:f5:f3:95:ad:57:
         04:59:2d:9f:98:19:0b:98:d1:eb:02:d1:b8:3e:27:9d:b3:5b:
         7f:a3:1d:b4:07:e1:dc:ad:21:5c:28:b6:71:8b:2c:09:18:57:
         b2:8e:92:ad:95:ff:1f:90:ab:cd:00:b0:cf:fb:cf:67:61:b4:
         8c:29:a4:7c:eb:86:20:a7:2d:8f:f3:5c:49:fb:9f:4c:5a:c1:
         5b:a0:6c:64:1e:7c:d6:77:43:b6:b7:6a:36:db:b7:b8:ac:20:
         ee:0a:13:b8:34:29:02:0d:15:4d:6c:df:d5:23:f8:32:7f:cc:
         d6:8e:a7:b3:f3:fd:60:5e:93:2d:20:51:6f:1f:e7:4a:e0:d2:
         e5:3a:b9:a8:64:52:26:3e:37:84:01:91:c1:d1:ca:6d:ee:26:
         6c:aa:59:35:af:a9:10:c8:a2:57:ee:82:26:59:ca:1b:a2:8f:
         e5:af:b8:b1:6b:a8:c7:54:a2:38:2d:4d:ce:8d:bf:e8:d7:06:
         cb:be:a3:20:52:07:69:bf:cd:99:bc:78:96:86:b7:ce:6d:1b:
         89:f3:3b:1a:84:8d:f2:ed:d4:bc:f7:c6:03:c6:1f:61:c2:02:
         f6:af:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:11 2024 by rpki-client on console-ams.rpki-client.org